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Abstract — Target  tracking  is  a  canonical  issue  in  sensor  net¬ 
works  research.  However,  tracking  security  has  gained  little  or 
no  attention.  Once  a  sensor  node  is  compromised,  it  will  be  able 
to  inject  false  location  information  into  the  network,  and  those 
nodes  receiving  such  information  will  suffer  greatly  in  terms  of 
tracking  precision.  This  paper,  to  the  best  of  our  knowledge, 
is  the  first  to  explore  the  topic  of  security  in  the  context  of 
Bayesian  tracking  for  sensor  networks.  We  propose  to  activate 
more  than  one  nodes  at  each  time  step,  and  use  a  relaxation 
labeling  algorithm  to  detect  malicious  nodes  whose  reports  are 
then  removed.  Simulations  based  on  both  linear  and  nonlinear 
motion  models  demonstrate  that  out  algorithm  works  better  than 
simply  averaging  over  the  results  based  on  the  redundant  sets  of 
nodes. 


I.  Introduction 

Target  tracking  is  a  canonical  issue  in  sensor  networks 
research  [1],  It  is  essential  to  be  able  to  predict  the  current  and 
future  locations  of  the  objects  of  interest,  say,  in  environmental 
monitoring  or  homeland  security  applications.  Target  tracking 
in  sensor  networks  was  first  proposed  to  be  solved  using 
traditional  tracking  algorithms  such  as  Bayesian  [2],  extended 
Kalman  filter  [3]  or  particle  filter  [4].  Recent  research  has  seen 
more  sophisticated  tracking  algorithms  for  sensor  networks. 
For  example,  [5]  and  [6]  propose  distributed  particle  filters; 
while  [7]  proposes  decentralized  sigma-point  information 
filters  for  target  tracking.  Another  related  and  important  issue 
is  classification  of  the  motion  model  of  the  target(s),  and  [8] 
proposes  joint  multiple-target  tracking  and  classification. 

However,  tracking  security  has  gained  little  or  no  attention. 
Once  one  or  more  of  the  nodes  are  compromised,  they  could 
generate  false  measurements  or  false  target-state  predictions 
into  the  network,  and  those  nodes  which  receive  such 
information  will  not  be  able  to  produce  correct  target  state 
estimates.  [9]  explores  a  topic  similar  to  tracking  security  by 
proposing  a  protocol  to  securely  verify  the  time  of  encounters 
in  multi-hop  networks.  However,  [9]  did  not  address  the 
security  issue  in  the  context  of  Bayesian  tracking. 


II.  Overview  on  Target  Tracking 
A.  System  Models 

A  target-tracking  problem  is  to  estimate  the  states  of  the  tar¬ 
gets)  based  on  sensor-node  measurements.  In  target  tracking, 
two  models  form  the  foundation  of  all  algorithms:  the  motion 
model  [10]  of  the  target  positions  and  the  measurement  model 
of  the  sensor  nodes.  Consider  the  evolution  of  state  sequence 
{xfc,  k  £  N}  of  a  target  given  by 


Xfc  =  /fc(Xfc_i,Vfc_i)  (1) 

where  x^  is  the  state  of  the  target  at  time  k,  fk  is  a  possibly 
nonlinear  function,  v /,._■]  is  an  i.i.d.  noise  sequence,  and  N  is 
the  set  of  natural  numbers. 


The  other  model  of  interest  is  the  measurement  model  of  the 
sensor  nodes. Among  the  various  sensor  models  for  different 
types  of  sensor  nodes,  we  will  use  the  amplitude  sensor 
model  [11]  since  it  models  a  general  amplitude  measurement 
and  can  be  applied  to  many  different  types  of  signals 


Zk  = 


Xfe  -  s1 


nk 


(2) 


where  a  is  the  amplitude  of  the  signal  emitted  from  the  target 
and  it  is  assumed  to  be  known.  In  (2),  s’  is  the  known  location 
of  node  i,  and  p  is  the  attenuation  factor. 


B.  Tracking  Algorithm 

In  a  tracking  problem,  our  purpose  is  to  estimate  the  belief 
p(xfc|z1:fc)  at  each  time  step  k.  We  generally  have  two  stages 
at  each  time  step  /,:::  prediction  and  update.  Suppose  that  the 
required  pdf  p(xfc_i |zi:fc_i)  is  available.  In  the  prediction 
stage,  we  obtain  the  prior  pdf  of  Xk  via  the  Chapman- 
Kolmogorov  equation 


P(xk|zi;k-l)  =  /  p(xk|xk— l)p(xk-i|zi:k— l)dxk- 


(3) 


This  paper,  to  the  best  of  our  knowledge,  is  the  first  paper 
on  secure  Bayesian  tracking  in  sensor  networks.  We  propose 
a  new  relaxation  labeling  algorithm  to  detect  malicious  nodes. 
The  rest  of  this  paper  is  organized  as  follows.  Section  II 
describes  our  system  models  in  terms  of  tracking.  Section 
III  defines  the  problem,  and  Section  IV  proposes  a  secure  - 
tracking  solution.  Section  V  and  VI  are  experimental  results 
and  conclusions,  respectively. 


In  (3),  the  probabilistic  model  of  p(xk|xk  _i)  is  defined  by 
(1)  and  the  known  statistics  of  Vfc_i. 

As  the  measurement  z/r  becomes  available  for  node  i,  we 
may  finally  obtain  the  desired  p(xk\zi:k).  This  is  called  the 
update  stage,  and  Bayes  rule  is  used  as 

/  ,  >.  P(Zk|Xk)p(Xk|Zi:k— l)  ... 

p(xk|zi:k)  =  - 7 — i - 7 -  (4) 

P(Zk|Zl:k-l) 
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where  the  normalizing  constant 

P(ZkNl:k— l)  =  j  P(zk|xk)p(xk|zl:k-l)rfxk_1  (5) 

depends  on  the  belief  p(zk|xk)  defined  by  (2).  The  recursive 
prediction  and  update  relations  of  (3)  and  (4)  form  the  optimal 
Bayesian  solution  to  the  tracking  problem. 


In  practice,  we  use  the  bootstrap  filter  algorithm  [12] 
to  simulate  the  prediction  and  update  stages  since  the  the 
measurement  model  in  (2)  and  the  motion  model  in  (1)  can 
both  possibly  be  nonlinear.  We  will  only  briefly  describe 
the  bootstrap  filter  algorithm  here,  for  details  and  proofs, 
please  refer  to  [12].  To  initiate  the  algorithm,  N  samples 
{x0(i),  i  =  1, •  •  •  ,  N}  are  drawn  from  the  known  prior,  p(x0) 
and  x0('i)  =  1.  At  the  prediction  stage,  each  sample 
Xfc_i (i)  is  passed  through  the  system  model  to  obtain  samples 
from  the  prior  at  time  step  k:  xjl(i)  =  ffc_i(xfc_i(z),  Vfc_i(i)), 
where  Vfc_i(i)  is  a  sample  drawn  from  the  pdf  of  the  nose 
p(vfc_i)  in  (1). 


At  the  update  stage,  on  receipt  of  the  measurement  Zk, 
we  evaluate  the  likelihood  of  each  prior  sample  and  obtain 
a  normalized  weight,  qt,  for  each  sample 


=  pQfcKCO) 

*  £f=iPK-|x*fc(j)) 


(6) 


To  avoid  the  degeneracy  problem  [13]  in  particle  filter  meth¬ 
ods,  we  will  resample  the  sample  and  weight  pair  (x£,  f/,:]  for 
i  =  1,  •  •  •  ,  N  times.  The  resampling  procedure  is  performed 
by  drawing  a  random  sample  a,  from  the  uniform  distribution 
over  (0, 1],  The  value  x£(M)  corresponding  to 


M—l  M 

^2qj<ui<J2qj  (7) 

3=0  3=0 

is  selected  as  a  sample  for  the  posterior.  Note  that  in  (7), 
qo  =  0.  After  the  resampling  has  been  done  for  i  =  1,  •  •  •  ,N 
times,  we  obtain  the  new  samples  {xfc(z),z  =  l,--  -  ,N}  so 
that  for  any  j,  Pr{xk(j )  =  x£(i)}  =  qt. 


Note  that  in  particle  filter  algorithms,  the  samples 
{xfc(z),  i  =  1,  ■  ■  •  ,  N}  approaches  p(ptk \zk)  as  N  asymptoti¬ 
cally  gets  larger. 

III.  Problem  Definition 

A.  Assumptions 

(1)  We  assume  that  malicious  nodes  can  successfully  au¬ 
thenticate  with  the  sensor  network,  and  their  data  can  be 
encrypted  with  the  same  key  shared  with  other  nodes  in  the 
network.  (2)  We  define  malicious  nodes  to  be  colluding  -  they 
will  always  report  p(x\z)  whose  mean  lies  on  a  incorrect, 
fictitious  path.  That  is  to  say,  at  the  same  time  step,  those 
malicious  nodes  will  point  to  the  same  location  on  the  fictitious 
path.  Hence  regardless  what  information  from  the  previous 
time  step  is  passed  to  the  malicious  node,  it  will  produce 


the  false  p(x\z)  whose  mean  lies  on  the  fictitious  path.  The 
colluding  behavior  is  also  what  distinguishes  malicious  nodes 
from  ordinary  malfunctional  nodes.  Figure  1  illustrates  a  six- 
node  scenario,  in  which  node  3  and  node  5  are  malicious. 
(3)  We  assume  a  centralized  scenario  in  which  a  central 
processing  unit  will  collect  tracking  reports  from  the  sensor 
nodes,  determine  which  of  them  are  malicious  and  remove 
them.  (4)  The  purpose  of  the  fictitious  path  is  to  allow  the 
enemy  to  avoid  surveillance.  However,  the  fictitious  path  does 
not  go  beyond  the  sensing  range  of  the  nodes  or  violate  the 
motion  model  in  (1).  A  rigorous  analysis  of  different  behaviors 
of  malicious  nodes  under  the  motion  model  is  an  ongoing 
work.  (5)  We  assume  that  sensor  nodes  at  successive  time 
steps  are  positioned  so  close  that  they  form  a  clique,  i.e.  they 


Fig.  1.  We  have  6  active  sensor  nodes  in  the  network,  which  are  denoted 
as  0  through  5.  The  lower  path  is  the  true  target  path;  while  the  upper  one  is 
fictitious.  In  this  scenario,  all  malicious  nodes  will  report  the  upper  path,  i.e. 
Nodes  3  and  5  are  maliciuos 

B.  Problem  Definition 

We  assume  a  Bayesian  tracking  scenario  as  defined  in  (3), 
(4)  and  (5).  Since  information  from  the  node  at  previous 
time  step  is  crucial  in  predicting  the  current  target  location, 
activating  only  one  node  at  a  time  [2]  will  have  serious 
security  problems.  Hence  we  activate  at  least  two  sensor 
nodes  at  each  time  step.  Meanwhile,  an  unknown  number  of 
the  nodes  are  malicious  and  injecting  false  tracking  reports 
into  the  network.  The  problem  is  to  detect  those  malicious 
nodes,  and  to  provide  a  correct  target  path. 

IV.  Secure  Tracking  Algorithm 

We  propose  a  secure  tracking  algorithm  based  on  relaxation 
labeling  [14]— [16],  First,  we  activate  two  nodes  at  a  time,  as 
illustrated  in  Figure  2.  Let  us  begin  with  time  step  1  =  0, 
when  the  initial  position  of  the  target,  p( xq),  is  assumed  to 
be  know.  p(x o)  is  passed  to  the  two  nodes  activated  at  time 
step  t  =  1.  After  calculating  p(x±\zi)  using  particle  filter 
algorithms,  the  nodes  at  t  =  1  will  pass  their  beliefs  to  the 
nodes  at  t  =  2.  Since  each  node  at  t  =  2  has  two  p(x\\zi) 
from  t  =  1,  it  will  produce  two  different  p(x2\z2).  What  if, 
in  Figure  2,  node  1  is  malicious,  and  node  2  and  node  3  are 
benign?  Then  the  two  p(x2\z2)  calculated  by  node  3  would 
be  drastically  different. 

Following  such  logic,  we  design  our  relaxation  labeling 
algorithm  based  on  sets  of  three  nodes,  which  we  denote  as 
triples.  There  are  three  types  of  triples: 
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Fig.  2.  At  t  =  0,  P(x o)  is  known,  and  this  information  is  passed  to  the 
two  nodes  activated  at  t  =  1.  Using  particle  filter  algorithm,  node  1  and  node 
2  can  each  calculate  p(xi\zi),  and  they  are  passed  to  node  3  and  node  4. 
Both  node  3  and  node  4  have  two  inputs,  hence  will  produce  two  distinctive 
p(x2\z2),  respectively 

1)  Type  I  :  a  triple  consisting  of  two  predecessor  nodes 
and  one  successor  nodes.  For  example,  nodes  (1,2,3) 
and  (1,2,4)  in  Figure  2 

2)  Type  II:  a  triple  consisting  of  one  predecessor  node  and 
two  successor  nodes.  For  example,  nodes  (1,3,4)  and 
(2,3,4)  in  Figure  2 

3)  Type  III:  a  triple  consisting  solely  of  nodes  at  the  same 
time  instant.  For  example,  nodes  (1,2,3)  and  (4,5,6) 

In  our  algorithm,  the  nodes  in  a  Type  III  triple  do  not  pass 
information  to  each  other,  hence  we  will  only  use  Type  I  and 
Type  II  triples  in  our  algorithm. 

A.  Type  I  Triples 

In  this  section,  we  focus  on  Type  I  triples  and  how  we 
define  the  compatibility  function  for  them.  In  Figure  3(a), 
we  illustrate  a  Type  I  triple,  and  we  denote  the  predecessor 
nodes  as  pi  and  p2;  and  the  successor  node  as  s. 


Fig.  3.  Two  predecessor  nodes  passing  information  to  one  successor  node. 

Both  node  pi  and  node  p2  pass  information  to  node  s,  hence 
node  s  can  examine  the  difference  between  the  two  beliefs  that 
it  produces.  We  denote  the  belief  that  node  s  calculates  based 
on  the  belief  of  node  pi  as  p1(x\z).  Similarly,  we  denote  the 
other  belief  that  node  s  calculates  as  p2(x\z).  We  can  quantify 
their  difference  as 

d=\\J^{,\z)-vHx\z)m  (8. 

where  ||  •  ||  denotes  the  Euclidean  distance. 

If  node  s  is  malicious,  then  regardless  of  what  were  passed 
to  it  from  its  predecessors,  node  s  will  report  a  p(x\z)  whose 
mean  falls  on  the  fictitious  path.  Hence  d  should  be  close 
to  0  if  node  s  is  malicious.  If  node  s  is  benign,  there  are 


three  cases:  (i)  One  of  its  predecessor  is  malicious  (the  other 
benign),  (ii)  Both  nodes  pi  and  p2  are  malicious  (iii)  Both 
nodes  pi  and  p2  are  benign.  If  node  s  is  benign,  and  one  of 
its  predecessor  is  malicious,  the  outputs  from  node  s  would 
disagree  on  each  other.  Hence  we  expect  d  to  be  large  in  case 
(i).  However,  cases  (ii)  and  (iii)  are  basically  the  same,  since 
in  case  (ii),  the  two  malicious  nodes  are  colluding  and  both 
point  to  the  fictitious  path.  Hence  in  both  case  (ii)  and  (iii), 
we  expect  d  to  be  small.  We  list  all  the  possible  cases  for  a 
Type  I  triple  in  Table  I.  Note  that  in  Figure  2,  the  behaviors 
of  Table  I  apply  to  nodes  (1,2,3)  and  (1,2,4). 


Predecessor  1 

Predecessor  2 

Successor 

Behavior 

malicious 

malicious 

malicious 

d  ~  0 

malicious 

malicious 

benign 

d  small 

malicious 

benign 

malicious 

d  ~  0 

malicious 

benign 

benign 

d  large 

benign 

malicious 

malicious 

d  ~  0 

benign 

malicious 

benign 

d  large 

benign 

benign 

malicious 

d  cz.  0 

benign 

benign 

benign 

d  small 

TABLE  I 

Expected  behaviors  in  d  for  a  Type  I  triple 


B.  Type  II  Triples 

In  a  Type  II  triple,  one  predecessor  node  will  pass  its 
p(x\z)  to  two  different  successors.  We  highlight  such  a 
scenario  in  Figure  3(b).  We  call  the  predecessor  node  p,  and 
the  two  successors  node  si  and  s2.  Assuming  that  node  p  is 
benign,  and  one  of  the  successors  is  malicious  (and  the  other 
benign),  the  outputs  from  the  two  successor  nodes  would  be 
different.  Again,  we  can  exploit  the  inconsistency  whenever 
the  nodes  are  behaving  differently. 

We  denote  the  belief  that  node  si  calculates  as  p1{x\z), 
and  the  belief  that  node  s2  calculates  as  p2(x\z).  Then  we 
can  calculate  the  difference  between  px(x \z)  and  p2{x\z) 
using  (8). 

Regardless  of  whether  node  p  is  malicious  or  not,  as  long 
as  one  successor  is  malicious  and  the  other  is  not,  we  expect 
d  to  be  large.  What  if  both  of  node  si  and  node  s2  are 
benign?  Since  they  are  given  the  same  input  from  node  p, 
their  outputs  should  be  similar  because  they  are  both  benign 
nodes.  Hence  we  expect  d  to  be  small  when  both  of  node  si 
and  node  s2  are  benign.  If  both  of  node  si  and  node  s2  are 
malicious,  we  expect  d  ~  0,  since  no  matter  what  their  inputs 
are,  they  will  report  the  fictitious  path.  We  list  all  8  possible 
behaviors  in  Table  II. 

C.  Details  of  the  Algorithm 

The  expected  behaviors  in  Table  I  and  II  are  the  core  of 
our  relaxation  labeling  algorithm.  We  define  a  compatibility 
function,  r,  based  on  d  as  follows 
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Predecessor 

Successor  1 

Successor  2 

Behavior 

malicious 

malicious 

malicious 

d  ~  0 

malicious 

malicious 

benign 

d  small 

malicious 

benign 

malicious 

d  small 

malicious 

benign 

benign 

d  small 

benign 

malicious 

malicious 

d  ~  0 

benign 

malicious 

benign 

d  large 

benign 

benign 

malicious 

d  large 

benign 

benign 

benign 

d  small 

TABLE  II 

Expected  behaviors  in  d  for  a  Type  II  triple 


where  N  =  (n  —  l)(n  —  2),  n  is  the  number  of  nodes  in  the 
network,  j  =  1,  k  =  1,  j  ^  i,  k  ^  i,  j  ^  k,  and 
P(-)  is  a  confidence  function  to  be  defined  and  explained 
later.  Hence  in  (10),  q\{ A)  is  a  way  to  tally  all  the  possibilities 
when  we  label  node  i  as  A,  label  node  j  as  A'  and  label 
node  k  as  A".  Note  that  in  (10),  t  is  the  iteration  number, 
since  the  relaxation  labeling  algorithm  is  an  iterative  process. 
Furthermore,  in  (10),  we  exclude  all  the  cases  that  node  i,  j 
and  k  are  at  the  same  time  step  in  the  tracking  process. 


2e~ad  -  1, 

2  __  1 

l  +  e-c(d-/3)  1 

where  a  and  ti  are  parameters.  Note  that  the  compatibility 
function  r  will  always  return  a  value  between  -1  and  1.  The 
higher  the  value  that  r  returns,  the  more  compatible  the  3 
nodes  are.  For  example,  in  Figure  2,  if  we  assume  node  1  is 
malicious,  node  2  is  benign,  and  node  3  is  malicious,  then 
we  expect  d  ~  0,  as  in  Table  I.  We  then  calculate  r  using 
1  —  1+e-a(d-)3)  ■  If  the  assumption  that  node  1  is  malicious, 
node  2  is  benign,  and  node  3  is  malicious  is  indeed  true,  then 
the  empirical  data,  d,  should  lead  r  to  return  a  value  close 
to  1.  Otherwise,  it  should  return  a  negative  number  which  is 
larger  than  -1. 

We  illustrate  some  parameter  settings  of  (9)  in  Figure  4. 
In  Figure  4(a),  we  expect  d  to  be  small,  hence  a  small  d  will 
lead  r  to  return  a  value  close  to  1.  On  the  other  hand,  we 
expect  d  to  be  large  in  Figure  4(b),  hence  a  large  d  will  make 
r  return  a  value  close  to  1. 


if  d  small  or  0 
if  d  is  large 


(9) 


(a)  r  for  d  small  or  0 


(b)  r  for  d  large 


Fig.  4.  Illustration  of  some  parameter  settings  in  (9) 


So  if  we  assume  node  1  is  malicious,  how  is  that  compatible 
with,  say,  node  2  being  malicious  and  node  3  benign?  How 
about  node  1  being  malicious,  node  2  and  3  both  being  benign? 
In  each  possible  case,  we  can  calculate  the  compatibility 
function  r  using  (9).  We  denote  malicious  as  Ao  and  benign 
as  Ai,  and  we  define  a  function  q  which  accumulates  all  the 
effects  of  labeling  node  i  as  A 

Qtw  =  ^EEEP?(A,)EP*(A"  mo,  ao 

j  k  A'  A" 


Finally,  we  define  the  confidence  P{ A).  The  confidence  of 
node  i  having  label  A  j  is  denoted  as  Pi(Xj).  The  confidence 
Pi(Xj)  has  probability-like  properties: 


0  <  Pi(Xj)  <  1  5>(A,)  =  1.  (ID 

3 

Note  that  in  (11),  we  only  have  two  labels,  hence  j  =  0, 1. 
Following  [14],  we  will  iteratively  update  the  confidence  of 
node  i  having  label  j  as 


pr\\)  = 


Pji^j)  [1  +  Qi(^j)] 
D\ 


(12) 


where  D \  =  [1  +  Qi(^j)]  *s  a  normalization 

required  to  ensure  that  Pi(Xj)  sums  to  1,  and  t  stands  for 
iteration.  If  after  many  iterations,  P210°(^o)  converges  to  1, 
while  P210°(/^i)  converges  to  0,  then  node  2  is  found  to  be 
malicious. 


It  is  also  possible  to  activate  more  nodes  at  each  time  step, 
as  shown  in  Figure  5.  What  is  more,  if  we  have  more  than 
3  nodes,  we  can  not  only  do  tracking,  but  also  localization 
of  the  target.  This  will  provide  added  security  mechanism 
using  the  secure  localization  algorithms.  We  summarize  the 
algorithm  in  Table  III. 


time  t  =  k  Receive  p(xk—i\zk—i) 

(if  k  ==  1,  p(xo\zo)  =  p(x o)  is  known) 
Activate  n  nodes 
Node  i  calculates  pl(xk\zk) 
time  t  =  k  +  1  Activate  n  nodes 

Each  node  receives  pl(xk\zk),  i  =  1, . . . ,  n 
Node  j  calculates  pJ  (xk-\-i\zk-\-i),  j  =  1, . . . ,  n 
Use  relaxation  labeling  algorithm 
Remove  malicious  nodes 
Average  the  results  to  obtain  p(xk+i\zk+i) 
time  t  =  k  +  2  Go  to  time  t  =  k\  use  the  same  algorithm  except 
k  is  replaced  with  (k  +  2) 

_ p(a:fc-l|zfc-i)  is  replaced  with  p(xk+1  |zfc+1) 

TABLE  m 

Secure  tracking  algorithm  using  relaxation  labeling 


V.  Experiments 

The  target  is  traveling  along  a  one-dimensional  space  with 
the  following  motion  model 


xt  =  xt- i  +  0.25  +  wt- i 


(13) 
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Fig.  5.  Illustration  of  the  relaxation  labeling  algorithm.  The  rectangular  box 
stands  for  the  central  processing  unit.  At  each  time  step  (except  time  0),  we 
activate  3  nodes.  For  every  3  nodes  (except  time  0),  we  perform  relaxation 
labeling  algorithm  to  detect  malicious  nodes.  After  removing  malicious  nodes 
and  average  the  results  from  benign  nodes,  the  relaxation  labeling  algorithm 
produces  a  correct  result  and  pass  it  on  to  the  next  time  step. 


r 


Jw _ _  “  JiX 


0  20  40  60  0  20  40  60 

Iterations  Iterations 

Fig.  7.  Probability  for  being  malicious  for  the  6  nodes  at  time  steps  5  and 
6. 


where  ujt-i  is  the  process  noise,  and  its  variance  is  0.1.  The 
initial  position  of  the  target,  Xq,  is  also  0.1.  The  sensor  model 
is 


yt 


20 

|  Xt  -  Si  I 


+  Vt 


(14) 


where  vt  is  the  measurement  noise,  whose  variance  is  1.0. 
We  simulate  the  path  of  the  target  over  25  time  steps,  and  it 
is  illustrated  in  Figure  6(a). 


Fig.  8.  Tracking  performance  for  activating  3  nodes  at  each  time  step.  From 
t  =  5  to  t  =  22,  there  is  one  malicious  node  at  each  time  step. 


(a)  xt 


(b)  yt 


Fig.  6.  System  setup  for  the  experiment. 


We  evenly  deploy  15  sensor  nodes  within  [0,30].  At  each 
time  step,  we  will  activate  3  sensor  nodes.  At  time  t  =  k,  we 
activate  the  3  closest  nodes  to  the  target  position  at  t  =  k  —  1. 
At  time  t  =  k,  we  do  not  know  the  current  target  position 
until  sensor  nodes  are  activated  and  measurements  are  made, 
hence  selecting  nodes  based  on  the  target  position  at  t  =  k  —  1 
is  a  logical  choice.  Since  we  activate  3  nodes  at  each  time 
step,  we  denote  the  closest  nodes  as  set  1,  the  second-closest 
nodes  as  set  2,  and  so  on.  We  denote  s\  as  the  node  in 
set  i  at  time  step  t  =  k;  for  example,  sJjo  stands  for  the 
closest  node  (to  Xig)  at  time  step  20.  The  measurements  from 
the  3  sets  of  nodes  activated  are  also  illustrated  in  Figure  6(b). 


To  create  attacks,  we  make  an  artificial  target  path  which 
is  a  line  from  x  =  20  at  t  =  0  to  x  =  30  at  t  =  25.  We 
replace  one  node  at  each  time  steps  from  5  to  22  with  an 
malicious  node  which  always  reports  the  target  position  on 
the  fictitious  line.  The  malicious  nodes  are:  Sg,  Sg,  s?,  s|,  Sg, 

q3  „2  1  2  „2  2  „3  „3  „1  „3  „2  3  „3 

*10’  *11’  *12’  *13’  *14’  *15’  *16’  *17’  *18’  *19’  *20’  *21’  *22- 

There  is  no  malicious  node  at  time  steps  t  <  4  or  t  >  23. 


After  applying  relaxation  labeling  to  the  6  nodes  at  time 
steps  t  =  5,6,  we  show  the  probability  of  each  node  being 


malicious,  p( Ao),  in  Figure  7.  We  can  clearly  see  that  p( Ao) 
for  the  two  malicious  nodes  indeed  goes  up  to  1,  while  p( Ao) 
for  benign  nodes  go  down  to  0.  Hence  we  will  remove  .si 
and  Sg. 

Next  we  apply  the  relaxation  labeling  algorithm  to  t  =  7, 8, 
t  =  9, 10,  •  •  •  to  t  =  21,22,  and  we  show  the  tracking 
performance  in  Figure  8.  Due  to  the  limitation  of  space,  we 
do  not  show  the  probability  of  all  the  nodes  (as  we  did  in 
Figure  7),  but  the  results  for  all  nodes  from  t  =  5  to  t  =  22 
are  all  correct. 

In  order  to  compare  the  performance  of  our  algorithm,  the 
tracking  result  without  relaxation  labeling  is  also  computed. 
The  3  sets  of  nodes  work  independently.  As  a  result,  we 
obtain  3  separate  paths  based  on  3  different  sets  of  nodes.  We 
then  take  average  of  the  3  paths,  and  the  result  is  shown  in 
Figure  8.  The  mean-square  error  (mse)  for  the  tracking  result 
using  relaxation  labeling,  as  compared  to  the  true  target  path, 
is  12.107.  On  the  other  hand,  the  mse  for  the  tracking  result 
without  relaxation  labeling  is  139.293. 

As  a  twist,  we  repeat  our  previous  experiment,  except 
making  two  nodes  malicious  at  the  same  time  steps.  We 
select  these  nodes  are  malicious  nodes:  Sg,  Sg,  Sg,  s|,  s^q, 
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Iterations  Iterations 


Iterations 


Fig.  9.  Probability  for  being  malicious  for  the  6  nodes  at  time  steps  7  and 
8. 


Fig.  10.  Tracking  performance  for  activating  3  nodes  at  each  time  step.  There 
are  two  malicious  nodes  at  time  steps  t  =  6,  8, 10, 12, 14, 16, 18,  20,  22. 


q3  q1  q2  q1  q3  q2  „3  Q1  Q2  q1  q3  q2  q3 
*10’  *12’  *12’  *14’  *14’  *16’  *16’  *18’  *18’  *20’  *20’  *22’  *22* 


After  applying  relaxation  labeling  algorithms,  we  successfully 
detect  all  malicious  nodes  in  the  network.  For  example,  the 
result  on  t  =  7  and  t  =  8  are  illustrated  in  Figure  9.  We 
can  see  that  the  probability  of  being  malicious  for  s|  and 
Sg  indeed  converges  to  1.  The  tracking  performance  in  this 
experiment  is  shown  in  Figure  10.  We  can  observe  that 
although  we  activate  3  nodes  as  redundancy  in  tracking,  the 
malicious  nodes  still  have  lasting  effects  in  tracking.  Even 
after  we  average  the  results  of  3  nodes,  we  can  still  see 
that  malicious  nodes  are  successfully  at  misleading  the  path, 
especially  at  time  steps  t  =  12, 14, 16, 18, 20, 22  in  Figure  10. 
On  the  other  hand,  the  result  using  relaxation  labeling  is  less 
effected  by  the  malicious  nodes  since  they  are  removed.  The 
mse  for  the  25  time  steps  is  13.382  with  relaxation  labeling 
and  181.803  without  relaxation  labeling. 


VI.  Conclusion 

We  explore  a  new  topic  of  security  in  the  context  of 
Bayesian  tracking  in  sensor  networks.  A  new  algorithm  based 
on  relaxation  labeling  is  proposed  to  detect  colluding  ma¬ 
licious  nodes.  We  activate  at  least  two  nodes  at  each  time 
step,  and  inconsistency,  if  any,  between  the  tracking  outputs  at 
successive  time  steps  are  exploited.  Simulations  based  on  both 


linear  and  nonlinear  motion  models  show  that  out  algorithm 

works  better  than  simply  averaging  over  the  results  based  on 

the  redundant  sets  of  nodes. 
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